Free EU regulatory tools
Five focused tools to answer the questions your board, your DPO and your enterprise procurement reviewer will ask first. Built on the same deterministic NexCyber rule engine that powers the paid Assessment, Trust Passport and MRCC Certificate.
CRA Scope Checker
Is your product in scope of the Cyber Resilience Act ? Answer 6 guided questions, get an instant verdict + Annex III mapping + gap list.
NIS2 Applicability Checker
Does NIS2 apply to your organisation ? Sector + size mapping across the 18 critical sectors with Essential / Important verdict.
AI Act Risk Classifier
Is your AI system high-risk, limited-risk or out-of-scope ? Annex III mapping + risk class output + obligations preview.
RED Cyber Checker
Does the Radio Equipment Directive cyber delegated act apply to your wireless product ? Article 3.3 (d/e/f) scope + Aug 2025 deadline.
Penalty Calculator
Statutory cap + actuarial estimate of penalty exposure across CRA, NIS2, AI Act, GDPR. Three numbers : cap, expected loss, ARR-at-risk.
Responsibility Mapper
Who is personally liable in your organisation ? Role-to-obligation map across CRA, NIS2, AI Act, DORA, RED. Useful for board readouts and DPO briefs.
Frequently asked
Are these tools really free, no login required ?›
Yes. The tools at /tools/* and /resources/penalty-calculator + responsibility-mapper run anonymously, no email capture wall, instant verdict. We use them as our front door — many enterprises start here, then upgrade to the paid platform for the full assessment + Trust Passport + MRCC Certificate.
Can I cite the verdict in a board briefing or regulator submission ?›
The tools are advisory, not legal advice. They reproduce the deterministic NexCyber rule engine logic (no LLM in the decision path, anchored on EU regulations CELEX + article references). The output is sourced and reproducible, which makes it citable for internal readouts. For binding interpretation, upgrade to the paid platform where the MRCC Certificate carries a cryptographic signature.
What's the difference between a Free Tool and the full Assessment ?›
Free Tools answer one focused question per regulation (in-scope ? high-risk ? exposure ?). The full Assessment at /assess walks every applicable obligation, ingests evidence + SBOM, computes the EU Market Access Score and generates the Trust Passport + persona-tailored reports. Free Tools = front door. Assessment + Trust Factory = the depth.
Ready to go deeper ?
The free tools answer one focused question. The full Assessment at /assess walks every applicable obligation across CRA, NIS2, AI Act, DORA and RED — and produces the Trust Passport + MRCC Certificate that procurement teams and notified bodies expect.